medium5.8
CVE-2015-2337
TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x…
Impact
TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Fusion | Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 |
| Vmware | Player | Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 |
| Vmware | Workstation | Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5 |
| Vmware | Horizon Client | Versions 3.2.0, 3.3 |
| Vmware | Horizon View Client | Versions 5.4, 5.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/75095
- http://www.securitytracker.com/id/1032529
- http://www.securitytracker.com/id/1032530
- http://www.vmware.com/security/advisories/VMSA-2015-0004.html
- http://www.securityfocus.com/bid/75095
- http://www.securitytracker.com/id/1032529
- http://www.securitytracker.com/id/1032530
- http://www.vmware.com/security/advisories/VMSA-2015-0004.html